$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa File: 7e2438a2-fb94-398c-ba49-230b8452d27d.roa (raw, json) Hash identifier: gVi7BQB9ZdJGHgrfq29nmrVOkWK/CpzRQQlQ0EgJwK8= Subject key identifier: 61:F2:45:3A:79:C6:A9:D7:EF:FA:A1:02:04:FF:4B:1A:29:AF:8D:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E61450E792637DCC62C521080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16625 IP address blocks: 23.41.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:0e:79:26:37:dc:c6:2c:52:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=594a75c0-a834-4c60-82ff-e6db032820de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4d:95:99:9a:ae:d1:49:07:ce:00:57:56:4d: 28:15:0d:b5:9e:84:18:d1:54:b0:43:7c:b7:72:f1: 10:f5:b9:63:7b:69:29:40:07:23:7c:e4:b7:1d:db: 59:59:42:f9:9a:e3:13:38:7a:78:0c:1d:6f:b4:35: f6:5b:05:20:fd:9a:ed:08:d7:d5:b0:f6:89:27:5d: b9:21:53:6d:f6:c3:ae:d1:cd:1c:31:03:b8:fb:8c: 3f:c5:de:59:7c:7d:de:d7:18:31:a7:18:b3:b9:1f: 40:45:a8:41:43:11:84:87:aa:a8:9d:ec:e7:35:68: 2b:e3:6b:61:84:44:88:18:22:38:92:aa:8d:c4:36: 08:11:d8:b4:d4:c5:47:60:07:11:27:0d:ac:82:15: b4:7f:9c:48:28:17:59:5f:65:b9:c0:8d:6f:32:02: bf:ed:81:49:e1:6b:e5:47:93:ca:4f:9f:e5:be:6f: c2:b0:f6:7e:39:64:e9:bd:9f:de:7d:2b:aa:4c:f1: a6:a4:ca:93:2b:fc:21:3a:aa:64:d5:1a:03:86:b6: df:9c:4c:20:10:2f:b3:c9:a5:fa:1a:fd:90:34:f8: 1c:ad:47:11:41:5b:f7:7c:18:ca:60:43:ee:21:28: de:66:f4:aa:36:95:62:50:03:e4:fd:5c:7a:8c:4b: b1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F2:45:3A:79:C6:A9:D7:EF:FA:A1:02:04:FF:4B:1A:29:AF:8D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ae:ac:53:df:89:07:6d:68:78:3a:38:d4:86:78:44:2d:82: 35:f9:23:2b:a9:39:23:f3:83:97:e6:ca:2d:2d:14:96:80:c0: 1d:20:80:12:39:13:04:6f:69:8b:02:f9:d9:b8:17:c9:29:86: e8:c7:ed:a8:a9:e4:2e:16:e8:33:52:16:16:2a:08:45:6d:4f: b8:a0:aa:01:f5:ab:09:6f:50:d6:ee:d5:2d:c9:9c:fc:b9:54: 96:be:40:6b:7f:4c:49:f8:0c:e3:1a:f9:4d:47:7a:7e:5b:cb: 45:86:b5:47:c4:e4:3e:4c:bc:24:cd:6a:b9:50:60:ea:9f:5b: f9:fd:b0:ba:32:66:6d:18:7e:a2:96:4f:2e:3c:bf:b4:b1:96: 74:a0:8d:50:bb:fe:ef:07:47:1b:67:05:7f:f0:0d:1b:f9:09: 9c:88:a5:88:17:13:bb:51:da:e5:28:d5:79:e5:75:18:19:41: 7e:cd:dd:d6:7d:9c:ce:a7:a5:f0:fa:1b:08:92:0f:70:91:b6: 4f:22:c6:f9:c2:d6:3a:51:2c:9b:2f:72:68:de:5a:d9:76:d0: 75:e6:1f:f6:7c:9a:05:10:1f:4d:6a:72:3a:30:a6:2c:26:76: c2:4c:53:ad:fe:e7:cc:29:f6:3d:11:49:03:5d:8c:c3:1e:89: 36:89:04:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRQ55JjfcxixSEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NTk0YTc1YzAtYTgzNC00YzYwLTgyZmYtZTZkYjAzMjgyMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU2VmZqu0UkHzgBXVk0oFQ21noQY0VSwQ3y3 cvEQ9blje2kpQAcjfOS3HdtZWUL5muMTOHp4DB1vtDX2WwUg/ZrtCNfVsPaJJ125 IVNt9sOu0c0cMQO4+4w/xd5ZfH3e1xgxpxizuR9ARahBQxGEh6qoneznNWgr42th hESIGCI4kqqNxDYIEdi01MVHYAcRJw2sghW0f5xIKBdZX2W5wI1vMgK/7YFJ4Wvl R5PKT5/lvm/CsPZ+OWTpvZ/efSuqTPGmpMqTK/whOqpk1RoDhrbfnEwgEC+zyaX6 Gv2QNPgcrUcRQVv3fBjKYEPuISjeZvSqNpViUAPk/Vx6jEuxgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHyRTp5xqnX7/qhAgT/Sxopr411MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2UyNDM4YTItZmI5NC0z OThjLWJhNDktMjMwYjg0NTJkMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFykgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKurFPfiQdtaHg6ONSGeEQtgjX5IyupOSPzg5fmyi0tFJaAwB0ggBI5 EwRvaYsC+dm4F8kphujH7aip5C4W6DNSFhYqCEVtT7igqgH1qwlvUNbu1S3JnPy5 VJa+QGt/TEn4DOMa+U1Hen5by0WGtUfE5D5MvCTNarlQYOqfW/n9sLoyZm0YfqKW Ty48v7SxlnSgjVC7/u8HRxtnBX/wDRv5CZyIpYgXE7tR2uUo1XnldRgZQX7N3dZ9 nM6npfD6GwiSD3CRtk8ixvnC1jpRLJsvcmjeWtl20HXmH/Z8mgUQH01qcjowpiwm dsJMU63+58wp9j0RSQNdjMMeiTaJBDk= -----END CERTIFICATE-----Generated at Tue Jul 21 20:45:39 2026 by rpki-client